archive
US Cybersecurity Briefing Thursday, Oct 29, 2026 Covers the 24 hours since Wednesday morning's briefing Bottom line: CISA added two flaws to KEV on Oct 28: a VMware ESX logging bypass that a China-nexus group used as a zero-day against…
Read this postUS Cybersecurity Briefing Wednesday, Oct 28, 2026 Covers the 24 hours since Tuesday morning's briefing Bottom line: No new Texas attack surfaced in the window; the only new Texas detail is that the Frontline Education breach exposed SSNs of 44,652…
Read this postUS Cybersecurity Briefing Tuesday, Oct 27, 2026 Covers the 24 hours since Monday morning's briefing Bottom line: A cyberattack forced the University of New Mexico Health System, home to New Mexico's only Level I trauma center, to divert ambulances and…
Read this postUS Cybersecurity Briefing Monday, Oct 26, 2026 Covers Fri Oct 23 – Mon Oct 26 (includes weekend) Bottom line: Quiet weekend: no major new US incident broke Saturday or Sunday beyond Columbia, SC confirming ransomware. Most urgent: patch Arista VeloCloud…
Read this postUS Cybersecurity Briefing Friday, Oct 23, 2026 Covers the 24 hours since Thursday morning's briefing Bottom line: No new confirmed Texas incidents surfaced in the window. Nationally, the main story is developer and cloud supply chains: a poisoned LiteLLM release,…
Read this postIf you have a go-kit (ATAK & Meshtastic) made from a YouTube video that was created in the last few years, take it off the shelf this week and power it up. Chances are it won’t be working. Version 2.8.0…
Read this postUS Cybersecurity Briefing Thursday, Oct 22, 2026 Covers the 24 hours since Wednesday morning’s briefing Bottom line: PHP2Shell is the priority. Two critical, unauthenticated PHP RCE flaws were patched Oct 21, attackers are already probing for them, and CISA says…
Read this postUS Cybersecurity Briefing Wednesday, Oct 21, 2026 Covers the 24 hours since Tuesday morning's briefing Bottom line: PHP releases fixes for two leaked critical RCE flaws (“PHP2Shell”) today at 14:00 UTC (9:00 AM Central), and researchers expect mass exploitation within…
Read this postUS Cybersecurity Briefing Tuesday, Oct 20, 2026 Covers the 24 hours since Monday morning's briefing Bottom line: Organizations using ConnectWise Cloud Backup (formerly SkyKick) for Microsoft 365 should check their tenants now: a stolen vendor credential gave attackers access to…
Read this postUS Cybersecurity Briefing Monday, Oct 19, 2026 Covers Fri Oct 16 – Mon Oct 19 (includes weekend) Bottom line: A fairly quiet weekend. The top item is the ConnectWise Cloud Backup supply-chain compromise of Microsoft 365 tenants, which is still…
Read this post